Alternatives and similar repositories for z9:

Users that are interested in z9 are comparing it to the libraries listed below

• Retrospected / PurpleKeep
  Providing Azure pipelines to create an infrastructure and run Atomic tests.
  ☆50Updated last year
• pr0xylife / Pikabot
  ☆32Updated 10 months ago
• eric-conrad / c2-talk
  ☆36Updated 10 months ago
• Cyb3r-Monk / ACCD
  Active C&C Detector
  ☆152Updated last year
• mthcht / ThreatHunting-Keywords-yara-rules
  yara detection rules for hunting with the threathunting-keywords project
  ☆105Updated 2 weeks ago
• jaredcatkinson / MalwareMorphology
  ☆80Updated 3 months ago
• skandler / simulate-akira
  Simulation of Akira Ransomware with Invoke-AtomicTest
  ☆14Updated 7 months ago
• StrangerealIntel / Shadow-Pulse
  information about ransomware groups (Ransomware Analysis Notes)
  ☆36Updated last year
• 0x534a / dynmx
  Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!
  ☆82Updated last year
• splunk / ShellSweep
  ShellSweeping the evil.
  ☆163Updated 2 months ago
• xg5-simon / MS-Graph-BlueTeam
  MS Graph Commands and Tools for Blue Teamers
  ☆49Updated last year
• LOLAD-Project / LOLAD-Project.github.io
  https://lolad-project.github.io/
  ☆71Updated last month
• SafeBreach-Labs / aikido_wiper
  ☆65Updated 2 years ago
• CTI-Driven / LOLBins
  The LOLBins CTI-Driven (Living-Off-the-Land Binaries Cyber Threat Intelligence Driven) is a project that aims to help cyber defenders und…
  ☆118Updated 10 months ago
• Sam0x90 / CTI
  Repo containing various intel-based resources such as threat research, adversary emulation/simulation plan and so on
  ☆81Updated 9 months ago
• reecdeep / segugio
  Segugio allows the execution and tracking of critical steps in the malware detonation process, from clicking on the first stage to extrac…
  ☆146Updated 5 months ago
• embee-research / Yara-detection-rules
  Yara Rules for Modern Malware
  ☆73Updated 11 months ago
• Sam0x90 / CB-Threat-Hunting
  CarbonBlack EDR detection rules and response actions
  ☆71Updated 5 months ago
• QueenSquishy / plague
  Default Detections for EDR
  ☆97Updated last year
• AlbinoGazelle / esxi-testing-toolkit
  🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.
  ☆68Updated last month
• cybergoatpsyops / detections
  Placeholder for my detection repo and misc detection engineering content
  ☆42Updated last year
• vc0RExor / Malware-Threat-Reports
  A full analysis report detailing as much as possible of a Malware or a Threat
  ☆26Updated 8 months ago
• stuxnet999 / volatility-binaries
  Contains compiled binaries of Volatility
  ☆33Updated 3 weeks ago
• jstrosch / subcrawl
  SubCrawl is a modular framework for discovering open directories, identifying unique content through signatures and organizing the data w…
  ☆51Updated 2 months ago
• 100DaysofYARA / 2023
  Rules Shared by the Community from 100 Days of YARA 2023
  ☆77Updated last year
• cbecks2 / edr-artifacts
  This repository is meant to catalog network and host artifacts associated with various EDR products "shell" and response functionalities.
  ☆76Updated 5 months ago
• S3N4T0R-0X0 / APT28-Adversary-Simulation
  This is a simulation of attack by Fancy Bear group (APT28) targeting high-ranking government officials Western Asia and Eastern Europe
  ☆32Updated 8 months ago
• brokensound77 / LoFP
  Living off the False Positive!
  ☆33Updated 3 weeks ago
• LOLESXi-Project / LOLESXi
  LOLESXi is a curated compilation of binaries/scripts available in VMware ESXi that are were used to by adversaries in their intrusions. T…
  ☆118Updated 3 weeks ago
• RussianPanda95 / Configuration_extractors
  Configuration Extractors for Malware
  ☆91Updated 3 weeks ago